CISO?

["Rodrigues, Philip" <phil.rodrigues () UCONN EDU>]

Hi all,

I am a Network Security Analyst - you know, a low-level technical grunt.
:-)  The management structure above me is a little fuzzy, but the longer
I work here the more apparent one thing becomes:

We do not have a senior management-level Information Security position.
(And no, I am not looking for a position to be promoted into!)

For those of you who do have a CISO position on your campus, how did you
go about getting the position created?  Was there a watershed event or
was it just a natural evolution?  Have you had a CISO for a while now or
was it just recently you saw a need for one?

For those of you without a CISO-type position on your campus, do you
think you need one?  Do you plan on creating one?  Does your technical
staff fill that role, or has senior IT management assumed those
responsibilities?

Sorry if my questions are a little fuzzy - this is hardly a scientific
survey.  I am trying to figure out how to communicate what I see as a
need here to senior University administration, and I always like to see
if someone else has tackled this first.

Thanks in advance for any advice!

Phil
--

=======================================
Philip A. Rodrigues
Network Analyst, UITS
University of Connecticut

email: phil.rodrigues () uconn edu
phone: 860.486.3743
fax: 860.486.6580
web: http://www.security.uconn.edu
=======================================

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.